Last month, I posted my findings on the beta releases of XenApp 4.5/5.0 HRP5 for Windows 2003 and the 11.2 Plug-in. Today, Citrix released the final Citrix XenApp Online Plug-In 11.2 (formally called XenApp client). See my previous post on more detail on the new features and changes this client; another notable change in this client is the removal of the Program Neighborhood.

Program Neighborhood (PN.EXE) was primarlily leveraged to create connections directly to XenApp servers (as opposed to connecting through a Web Interface or the PNAgent). With the removal of the Program Neighborhood, Citrix has made it very clear that they do not want support this functionality. Fortunately, there IS a way to work around this issue if you decide to upgrade to 11.2 client and are still required to make a connection directly to a XenApp server. The trick is to create an ICA file. Copy and paste the template below into notepad and substitute the approriate server name denoted below as “servername.domain.com”. Save the file with a .ICA extension and voilà. You can now connect directly to a XenApp server with the 11.2 client.

Citrix Online Plug In 11.2

In 2021 there have been 5 vulnerabilities in Citrix with an average score of 7.6 out of ten. Last year Citrix had 23 security vulnerabilities published. Right now, Citrix is on track to have less security vulnerabilities in 2021 than it did last year. Last year, the average CVE base score was greater by 0.08.

Version 11.2 and later of the online plug-in introduces a new but unintended default behavior for launching.ica files: With Version 11.2 and later, launching an.ica file multiple times initiates a separate session for each.ica file launch. To test, make sure a legacy online web plugin is installed on your system such as 11.2.0.31560 for example. Edit your WebInterface.conf like above and set the version to “11.2.0.31560”. Hit the web interface and you will passthrough with no issue. Now edit the string again and change it to “11.2.0.31561”.

downloadWhy can't I download this file?

Note: The Windows Online plug-in specific version 12.0.0 does not support this procedure. Refer CTX124871 - 12.0 Online Web Plug-in Using Single Sign On - SSON Fails with Web Interface.

Citrix Online Plug-in For Mac 11.2 Download

Use the following steps to install only the Web Plug-in without the Program Neighborhood Agent Plug-in from the Full package and verify that Pass-Through Authentication is working.

Citrix Online Plugin 11.2 For Windows Download

1. Download the CitrixOnlinePluginFull.exe package.

2. Run the following command:

   citrixonlinepluginfull.exe ADDLOCAL='ICA_Client,SSON,Flash,USB,DesktopViewer'

3. Log on to the workstation, then log off (this is to ensure the Pass-Through Authentication service is installed and running correctly).

4. Using a Utility such as the ICA File Creation Utility (Citrix Quick Launch), create an ICA File similar to the following:

   [Encoding]
   InputEncoding=ISO8859_1
   [WFClient]
   HttpBrowserAddress=<your server name>
   [ApplicationServers]
   Notepad -online=
   [Notepad -online]
   Address=Notepad -online
   InitialProgram=#Notepad -online
   ClientAudio=On
   AudioBandwidthLimit=2
   TWIMode=On
   DesiredColor=16
   DesiredHRes=800
   DesiredVRes=600
   Compress=On
   TransportDriver=TCP/IP
   WinStationDriver=ICA 3.0
   BrowserProtocol=HTTPonTCP
   [Compress]
   DriverName= PDCOMP.DLL
   DriverNameWin16= PDCOMPW.DLL
   DriverNameWin32= PDCOMPN.DLL

5. Enable the Group Policy Object (GPO) to use Pass-Through Authentication, as outlined in CTX113004 - How to Configure Single Sign-on for Web Interface Using Version 10, 11, and 12x Plug-ins.

6. Verify that double-clicking on the ICA File and connecting to Web Interface work appropriately.

7. Verify that using wfcrun32.exe and wfica32.exe at a command line work appropriately.